RHSA-2026:55530
Vulnerability from csaf_redhat - Published: 2026-08-17 13:08 - Updated: 2026-09-23 17:40Summary
Red Hat Security Advisory: 389-ds:1.4 security update
Severity
Important
Notes
Topic: An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: 389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.
Security Fix(es):
* 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check (CVE-2026-11770)
* 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser (CVE-2026-11788)
* 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing (CVE-2026-15722)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean match result, the attacker can extract sensitive server configuration metadata, including replication bind DNs and password storage scheme information.
7.5 (High)
Affected products
Fixed
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.src::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:python3-lib389-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.noarch::389-ds:1.4 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure.
5.9 (Medium)
Affected products
Fixed
42 products, the same list as for
CVE-2026-11770
Threats
Impact
Moderate
A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP server by sending a crafted StartNSDS50ReplicationRequest extended operation containing a replica ID field with more than 16 digit characters. The overflow occurs during payload decoding, before any authorization check. Stack protectors limit impact to denial of service.
7.5 (High)
Affected products
Fixed
42 products, the same list as for
CVE-2026-11770
Threats
Impact
Important
References
19 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for the 389-ds:1.4 module is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. \n\nSecurity Fix(es):\n\n* 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check (CVE-2026-11770)\n\n* 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser (CVE-2026-11788)\n\n* 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing (CVE-2026-15722)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:55530",
"url": "https://access.redhat.com/errata/RHSA-2026:55530"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2484802",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484802"
},
{
"category": "external",
"summary": "2485423",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485423"
},
{
"category": "external",
"summary": "2499961",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499961"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_55530.json"
}
],
"title": "Red Hat Security Advisory: 389-ds:1.4 security update",
"tracking": {
"current_release_date": "2026-09-23T17:40:37+00:00",
"generator": {
"date": "2026-09-23T17:40:37+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.0"
}
},
"id": "RHSA-2026:55530",
"initial_release_date": "2026-08-17T13:08:26+00:00",
"revision_history": [
{
"date": "2026-08-17T13:08:26+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-17T13:08:26+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-23T17:40:37+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.src::389-ds:1.4",
"product": {
"name": "389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.src (389-ds:1.4)",
"product_id": "389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.src::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=src\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "python3-lib389-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.noarch::389-ds:1.4",
"product": {
"name": "python3-lib389-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.noarch (389-ds:1.4)",
"product_id": "python3-lib389-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.noarch::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-lib389@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=noarch\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"product": {
"name": "389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64 (389-ds:1.4)",
"product_id": "389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=aarch64\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"product": {
"name": "389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64 (389-ds:1.4)",
"product_id": "389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=aarch64\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"product": {
"name": "389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64 (389-ds:1.4)",
"product_id": "389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=aarch64\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"product": {
"name": "389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64 (389-ds:1.4)",
"product_id": "389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=aarch64\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"product": {
"name": "389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64 (389-ds:1.4)",
"product_id": "389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=aarch64\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"product": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64 (389-ds:1.4)",
"product_id": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools-debuginfo@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=aarch64\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"product": {
"name": "389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64 (389-ds:1.4)",
"product_id": "389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=aarch64\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"product": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64 (389-ds:1.4)",
"product_id": "389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=aarch64\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"product": {
"name": "389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64 (389-ds:1.4)",
"product_id": "389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=aarch64\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64 (389-ds:1.4)",
"product_id": "389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=aarch64\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"product": {
"name": "389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le (389-ds:1.4)",
"product_id": "389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=ppc64le\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"product": {
"name": "389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le (389-ds:1.4)",
"product_id": "389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=ppc64le\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"product": {
"name": "389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le (389-ds:1.4)",
"product_id": "389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=ppc64le\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"product": {
"name": "389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le (389-ds:1.4)",
"product_id": "389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=ppc64le\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"product": {
"name": "389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le (389-ds:1.4)",
"product_id": "389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=ppc64le\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"product": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le (389-ds:1.4)",
"product_id": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools-debuginfo@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=ppc64le\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"product": {
"name": "389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le (389-ds:1.4)",
"product_id": "389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=ppc64le\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"product": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le (389-ds:1.4)",
"product_id": "389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=ppc64le\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"product": {
"name": "389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le (389-ds:1.4)",
"product_id": "389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=ppc64le\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le (389-ds:1.4)",
"product_id": "389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=ppc64le\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"product": {
"name": "389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x (389-ds:1.4)",
"product_id": "389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=s390x\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"product": {
"name": "389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x (389-ds:1.4)",
"product_id": "389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=s390x\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"product": {
"name": "389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x (389-ds:1.4)",
"product_id": "389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=s390x\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"product": {
"name": "389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x (389-ds:1.4)",
"product_id": "389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=s390x\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"product": {
"name": "389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x (389-ds:1.4)",
"product_id": "389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=s390x\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"product": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x (389-ds:1.4)",
"product_id": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools-debuginfo@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=s390x\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"product": {
"name": "389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x (389-ds:1.4)",
"product_id": "389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=s390x\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"product": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x (389-ds:1.4)",
"product_id": "389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=s390x\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"product": {
"name": "389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x (389-ds:1.4)",
"product_id": "389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=s390x\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x (389-ds:1.4)",
"product_id": "389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=s390x\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"product": {
"name": "389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64 (389-ds:1.4)",
"product_id": "389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=x86_64\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"product": {
"name": "389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64 (389-ds:1.4)",
"product_id": "389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debuginfo@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=x86_64\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"product": {
"name": "389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64 (389-ds:1.4)",
"product_id": "389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-debugsource@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=x86_64\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"product": {
"name": "389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64 (389-ds:1.4)",
"product_id": "389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-devel@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=x86_64\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"product": {
"name": "389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64 (389-ds:1.4)",
"product_id": "389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=x86_64\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"product": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64 (389-ds:1.4)",
"product_id": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-legacy-tools-debuginfo@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=x86_64\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"product": {
"name": "389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64 (389-ds:1.4)",
"product_id": "389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=x86_64\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"product": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64 (389-ds:1.4)",
"product_id": "389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-libs-debuginfo@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=x86_64\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"product": {
"name": "389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64 (389-ds:1.4)",
"product_id": "389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=x86_64\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
},
{
"category": "product_version",
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"product": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64 (389-ds:1.4)",
"product_id": "389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/389-ds-base-snmp-debuginfo@1.4.3.39-26.module%2Bel8.10.0%2B24634%2Bded7774b?arch=x86_64\u0026rpmmod=389-ds:1.4:8100020260806150504:25e700aa"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4"
},
"product_reference": "389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4"
},
"product_reference": "389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4"
},
"product_reference": "389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.src (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.src::389-ds:1.4"
},
"product_reference": "389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.src::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4"
},
"product_reference": "389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4"
},
"product_reference": "389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4"
},
"product_reference": "389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4"
},
"product_reference": "389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4"
},
"product_reference": "389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4"
},
"product_reference": "389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4"
},
"product_reference": "389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4"
},
"product_reference": "389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4"
},
"product_reference": "389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4"
},
"product_reference": "389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4"
},
"product_reference": "389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4"
},
"product_reference": "389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4"
},
"product_reference": "389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4"
},
"product_reference": "389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4"
},
"product_reference": "389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4"
},
"product_reference": "389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4"
},
"product_reference": "389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4"
},
"product_reference": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4"
},
"product_reference": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4"
},
"product_reference": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4"
},
"product_reference": "389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4"
},
"product_reference": "389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4"
},
"product_reference": "389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4"
},
"product_reference": "389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4"
},
"product_reference": "389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4"
},
"product_reference": "389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4"
},
"product_reference": "389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4"
},
"product_reference": "389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4"
},
"product_reference": "389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4"
},
"product_reference": "389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4"
},
"product_reference": "389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4"
},
"product_reference": "389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4"
},
"product_reference": "389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64 (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4"
},
"product_reference": "389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-lib389-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.noarch (389-ds:1.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:python3-lib389-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.noarch::389-ds:1.4"
},
"product_reference": "python3-lib389-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.noarch::389-ds:1.4",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Ian Murphy"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-11770",
"cwe": {
"id": "CWE-90",
"name": "Improper Neutralization of Special Elements used in an LDAP Query (\u0027LDAP Injection\u0027)"
},
"discovery_date": "2026-04-22T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484802"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean match result, the attacker can extract sensitive server configuration metadata, including replication bind DNs and password storage scheme information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A Moderate impact information disclosure flaw was found in 389 Directory Server. An unauthenticated remote attacker can exploit an LDAP filter injection vulnerability in the CleanAllRUV status-check extended operation. Red Hat products with `nsslapd-allow-anonymous-access` enabled by default are particularly susceptible.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.src::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:python3-lib389-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.noarch::389-ds:1.4"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-11770"
},
{
"category": "external",
"summary": "RHBZ#2484802",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484802"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-11770",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11770"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11770",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11770"
},
{
"category": "external",
"summary": "https://github.com/389ds/389-ds-base/blob/main/ldap/servers/plugins/replication/repl_extop.c",
"url": "https://github.com/389ds/389-ds-base/blob/main/ldap/servers/plugins/replication/repl_extop.c"
}
],
"release_date": "2026-07-31T09:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-17T13:08:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.src::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:python3-lib389-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.noarch::389-ds:1.4"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:55530"
},
{
"category": "workaround",
"details": "Set nsslapd-allow-anonymous-access to rootdse or off. Restrict LDAP ports to trusted networks. Monitor for extop OID 2.16.840.1.113730.3.6.8. Use strong replication manager passwords.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.src::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:python3-lib389-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.noarch::389-ds:1.4"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.src::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:python3-lib389-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.noarch::389-ds:1.4"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check"
},
{
"acknowledgments": [
{
"names": [
"Ian Murphy"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-11788",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-04-16T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2485423"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this issue as Moderate impact. The dereference control plugin in 389-ds-base does not check whether ber_init() succeeded before using the BER structure. If allocation fails, an LDAP search carrying the deref control can crash ns-slapd. The deref plugin is enabled by default, and anonymous clients can send the control when anonymous access is allowed.\nNVD rates this 7.5 (AC:L); Red Hat rates 5.9 (AC:H) because the NULL return from ber_init() occurs when memory allocation fails, not from a crafted control payload alone\u2014a well-formed deref search on a server with normal free memory does not trigger the crash. Natural OOM was not demonstrated end-to-end without fault injection. Disabling the deref plugin removes the vulnerable code path entirely.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.src::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:python3-lib389-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.noarch::389-ds:1.4"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-11788"
},
{
"category": "external",
"summary": "RHBZ#2485423",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485423"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-11788",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11788"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11788",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11788"
}
],
"release_date": "2026-04-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-17T13:08:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.src::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:python3-lib389-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.noarch::389-ds:1.4"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:55530"
},
{
"category": "workaround",
"details": "Disable the deref plugin (most effective): dsconf \u003cinstance\u003e plugin deref disable; systemctl restart dirsrv@\u003cinstance\u003e. Disable anonymous access (nsslapd-allow-anonymous-access=off) to raise the bar from pre-auth to authenticated exploitation. Configure memory limits as defense-in-depth: set nsslapd-maxbersize and nsslapd-conntablesize, and deploy in a cgroup with memory limits.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.src::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:python3-lib389-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.noarch::389-ds:1.4"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.src::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:python3-lib389-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.noarch::389-ds:1.4"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser"
},
{
"acknowledgments": [
{
"names": [
"Sebasti\u00e1n Alba Vives"
]
}
],
"cve": "CVE-2026-15722",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"discovery_date": "2026-04-01T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2499961"
}
],
"notes": [
{
"category": "description",
"text": "A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP server by sending a crafted StartNSDS50ReplicationRequest extended operation containing a replica ID field with more than 16 digit characters. The overflow occurs during payload decoding, before any authorization check. Stack protectors limit impact to denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw allows a remote unauthenticated attacker to crash the 389 Directory Server (ns-slapd) by sending a single crafted LDAP extended operation targeting the replication subsystem. The overflow is triggered during payload decoding, before the server checks whether the caller is authorized, so no credentials are needed on default configurations where anonymous access is enabled. The overflow data is limited to ASCII digit characters and a null byte. Stack protectors and ASLR prevent the overflow from being leveraged for code execution \u2014 the stack canary detects the corruption and aborts the process. The practical impact is therefore limited to denial of service. Customers who have restricted network access to the LDAP port to trusted replication partners, or who have disabled anonymous access by setting nsslapd-allow-anonymous-access to \u0027off\u0027 or \u0027rootdse\u0027, are not exposed to unauthenticated exploitation of this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.src::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:python3-lib389-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.noarch::389-ds:1.4"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-15722"
},
{
"category": "external",
"summary": "RHBZ#2499961",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499961"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-15722",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15722"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15722",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15722"
}
],
"release_date": "2026-07-31T09:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-17T13:08:26+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.src::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:python3-lib389-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.noarch::389-ds:1.4"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:55530"
},
{
"category": "workaround",
"details": "Disable anonymous access by setting nsslapd-allow-anonymous-access to \u0027off\u0027 or \u0027rootdse\u0027 in cn=config. Alternatively, restrict network access to the LDAP port to trusted replication partners only using firewall rules.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.src::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:python3-lib389-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.noarch::389-ds:1.4"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.src::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-debugsource-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-devel-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-legacy-tools-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-libs-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.aarch64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.ppc64le::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.s390x::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:389-ds-base-snmp-debuginfo-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.x86_64::389-ds:1.4",
"AppStream-8.10.0.Z.MAIN.EUS:python3-lib389-0:1.4.3.39-26.module+el8.10.0+24634+ded7774b.noarch::389-ds:1.4"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…